Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/TAVHSoe6jpflVHNRANOQNq6T4Bg.roa
File: TAVHSoe6jpflVHNRANOQNq6T4Bg.roa (raw, json)
Hash identifier: 5XAyyOjGSfV88o2algBifGdl3VtbRL7Z/4G3iGV5JkU=
Subject key identifier: 4C:05:47:4A:87:BA:8E:97:E5:54:73:51:00:D3:90:36:AE:93:E0:18
Certificate issuer: /CN=cad5b7910db0b78637f97c6d87c78045cb90dd26
Certificate serial: 01A05D683BEA9426C5B92630B4A9C9F941A1
Authority key identifier: CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/TAVHSoe6jpflVHNRANOQNq6T4Bg.roa
Signing time: Tue 01 Sep 2026 14:38:27 +0000
ROA not before: Tue 01 Sep 2026 14:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218791
IP address blocks: 2001:678:1314::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:68:3b:ea:94:26:c5:b9:26:30:b4:a9:c9:f9:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad5b7910db0b78637f97c6d87c78045cb90dd26
Validity
Not Before: Sep 1 14:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c05474a87ba8e97e554735100d39036ae93e018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:e4:bb:1e:15:e8:96:b7:0a:b1:29:4a:0d:
38:fc:43:21:f9:b0:28:23:d3:70:01:2c:8b:0a:16:
f6:59:db:6f:a9:9d:84:e0:0e:c8:22:d2:64:aa:09:
4a:db:4a:a4:eb:14:b1:ec:00:ec:d9:09:54:51:72:
68:28:aa:ac:a1:d3:ac:b4:a1:33:27:63:0f:4c:1e:
82:a4:07:e2:a6:a3:45:d6:2c:ef:8e:fd:9d:09:b1:
60:8c:b3:e0:cb:77:91:55:14:c8:3f:0e:6e:c9:93:
69:2a:ad:0f:f6:5a:0a:85:79:6c:ab:31:25:4d:8c:
f0:cb:30:c5:36:44:8d:3f:8b:b5:83:c7:d1:0d:c3:
33:d5:02:84:41:0d:03:20:08:ec:94:1a:96:02:7a:
78:48:8b:9b:25:66:b6:6c:ee:3c:7e:48:86:86:3b:
69:58:6b:2e:56:da:27:66:0e:24:c2:74:04:44:c1:
47:5f:18:36:bd:75:40:09:33:a5:ee:85:ac:08:2f:
19:62:21:df:d4:29:95:2d:68:5b:6c:d2:ff:84:48:
df:c8:fc:71:42:31:bf:eb:0a:eb:50:93:72:bf:f6:
5e:0b:27:d2:c0:24:c4:84:47:c9:2a:32:66:01:e9:
3c:45:a6:69:37:e9:a9:87:fe:67:a9:3d:05:d6:f2:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:47:4A:87:BA:8E:97:E5:54:73:51:00:D3:90:36:AE:93:E0:18
X509v3 Authority Key Identifier:
keyid:CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/TAVHSoe6jpflVHNRANOQNq6T4Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1314::/48
Signature Algorithm: sha256WithRSAEncryption
68:de:1a:25:38:02:16:0a:36:17:74:4d:e4:9f:c5:a3:74:09:
b7:17:57:60:d8:55:c4:9e:69:e1:11:c2:ad:79:a1:33:8c:fb:
5e:42:48:35:4c:83:58:01:3f:5d:dc:59:26:3c:f8:d3:e6:3e:
9d:52:63:09:d9:41:67:6b:d9:f8:53:8c:1e:9e:df:a2:70:c7:
47:e1:e0:78:29:88:d1:f2:2d:c0:17:a7:8b:26:6b:52:65:4c:
d9:16:c7:f6:ec:e5:dc:f3:8e:0b:05:f0:f1:07:0e:4a:a3:35:
fd:22:56:ce:17:fe:c2:4e:1e:12:61:76:c9:14:ff:32:30:64:
7b:eb:be:f0:98:99:99:42:73:79:da:a1:e1:d8:67:c3:0d:ad:
a8:34:a1:ab:fb:9c:15:59:a3:93:14:83:b4:37:c5:72:72:f2:
75:10:b5:89:cc:a5:f6:c8:35:56:d7:10:fe:fb:69:ff:b8:fd:
13:14:bf:a1:56:c6:4a:65:22:90:bd:36:e5:e0:50:46:cf:9c:
ae:34:fb:4a:72:02:55:ca:45:73:0a:19:4b:33:fa:e3:0f:7b:
e9:3a:70:fa:87:b1:e3:39:e3:8e:48:32:2d:27:df:eb:1b:4d:
13:56:f7:9d:bb:c3:be:35:b1:ed:ff:67:3e:53:44:de:e9:d5:
2f:f9:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:07:00 2026 by rpki-client